The gateway for attackers is often not technical vulnerabilities in systems, but rather carelessness or ignorance on the part of employees. Axept Business Software AG wants to decisively counteract this risk factor.
With e3 AG, Axept has found a partner who provides competent support in the area of ​​cyber security awareness. Two joint projects have now been successfully completed and further collaboration is being sought.

challenges

• Bypassing spam filters
• Address employees with different IT skills

Results

• Increased security awareness among employees
• Holistic IT security approach

Cyber ​​attacks have increased massively in recent years. Increasing digitalization and networking opens up countless new attack vectors for cyber criminals. The work that each of us carries out on a daily basis carries great risks. Axept Business Software AG wants to counteract these dangers and has decided to train its workforce in the topics of cyber security awareness. e3 AG was able to support Axept with its expertise in this project. The joint projects were each divided into two parts. In addition to the actual training – which formed the second part of the project – a phishing simulation was also part of the project. This combination offered the Axept a holistic approach to improving the safety awareness of the workforce.

Phishing simulation

The first step of the awareness campaign was to conduct a phishing simulation with the workforce. An individualized scenario was designed together with Axept. In both projects, a customized message template (phishing email), an individualized landing page (login page) and an account page (displayed after login) were created.
All employees then received an email with an individual link to the landing page, which recorded the click behavior of the recipients.
After the phishing simulations were completed, detailed evaluation reports were prepared with the respective results of the campaigns. These reports also contained important findings and measures regarding potential for improvement in the area of ​​IT security. In addition to the evaluation report, a management briefing is included in e3 AG's offer. A set of slides was prepared for the Axept management, which presented the results, findings and recommended measures in a management-friendly manner. The results of the phishing simulation and the findings from the evaluation report formed the basis for the subsequent awareness training.

Awareness training

After the phishing simulation was able to provide an overview of the level of awareness of the dangers of emails within the workforce, individualized awareness training was created and carried out.
The focus was on the topics of passwords, use of the cloud, email, secure surfing and home office. The content of the training was deliberately explained in a way that was easy to understand so that even people without an IT background could follow it without any problems. Employees were given simple tips and tricks that they can follow and implement directly in their daily work. They therefore make an essential contribution to improving Axept’s IT security.
The offer was rounded off with a flyer. This briefly and concisely describes the most important points of cyber security awareness and was made available to Axept employees.

Conclusion

Creating security awareness among employees when using IT resources is a central component of a holistic security strategy. With targeted measures, a significant improvement can be achieved with even small investments. e3 AG is proud to support Axept Business Software AG in its efforts to achieve sustainable and holistic IT security.